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Information registration method and document Information processing apparatus 



(57) In a document information processing appara- 
tus (Fig. 1) handling a large amount of documents, 
when a document is registered, retrieval data for docu- 
ment retrieval is created for each registered document 
Moreover, for each registered document, there is pro- 
duced an access control table in which information indi- 
cating accessibility of groups including users as 



document retrievers for the document is registered. 
When a user desires to retrieve a document, accessibil- 
ity of the user as the retriever is determined in accord- 
ance with the access control table for documents 
retrieved with retrieval data. 
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Description 

BACKGROUND OF THE INVENTION 

The present invention relates to document man- 
agement to conduct an access control operation in 
which a document to be outputted as a retrieval result 
under a retrieval condition specified by a retriever 
and/or a document to be similarly displayed are/is 
restricted or controlled in accordance with an author- 
ized level of the retriever. In relation to these application 
fields, the present invention relates in particular to a 
document management method and a document man- 
agement apparatus for supplying a large amount of doc- 
ument information of an electronic library system and 
the like to users via a wide area network such as Inter- 
net and Intranet. 

With recent rapid development and popularization 
of Internet there can be seen a trend of supplying doc- 
ument information via a network to users. Particularly, in 
a large-sized document information system such as an 
electronic library system, there appears a need to pro- 
vide a large volume of document information to users 
through a wide area network such as Internet and 
Intranet. 

In such a situation, World Wide Web (WWW) using 
a protocol called Hyper-Text Transfer Protocol (HTTP) 
capable of delivering document information to any place 
in the world is increasingly employed in document man- 
agement systems for various uses thanks to develop- 
ment of high-performance retrieval functions. 

Furthermore, on the other hand, with increase in 
the amount of document information to be supplied to 
users, to provide a highly-developed service such as 
management of document information including secret 
information and management of charging operation, 
there is required an access control function in which a 
result of document retrieval and document to be dis- 
played for a user are restricted in accordance with an 
authorized access level of the user. 

In the prior art, there has been adopted a method of 
implementing the access control operation in which 
when a user accesses a document management sys- 
tem, authentication of the user is carried out to conduct 
an access control operation for each database regis- 
tered to the system. 

That is, when accessing a database in this method 
the user inputs a user name and a Password to the doc- 
ument management system. The system then achieves 
an operation to authenticate the user on the basis of the 
inputted user name and password. The system allows 
the user completely authenticated to access databases 
for which access authentication has been already 
established, thereby conducting the access control 
operation. 

However, in the method above of accomplishing the 
access control operation for each database through the 
user authentication, there arises the following problem. 



Namely, it is difficult to carry out an access control oper- 
ation in a plurality of levels corresponding to groups to 
which users belong. This problem becomes remarkable 
especially when the system includes a large-sized doc- 

5 ument database. 

For example, in a case in which documents to be 
opened to users belonging to universities and public 
institutions are required to be discriminated from those 
to be opened to general users including private firms 

10 and companies, it is necessary to separately register 
these documents in the document management sys- 
tem. 

Namely, when users having different authorized 
access levels are allowed to access a document, the 
15 document is required to be registered to a plurality of 
databases. This accordingly increases the quantity of 
necessary resources such as magnetic disks and mem- 
ories, which results in a problem of increase in the cost 
of the document management system. 
20 Additionally, processing steps such as data regis- 
tration and backup steps become complex and hence 
there occurs a problem of conspicuous deterioration in 
the operation management and system maintenance. 
Furthermore, when an authorized access level is 
25 desired to be altered, document databases are required 
to be again registered to the system, which leads to a 
problem of a drawback in expandability. 

These problems related to the cost, operation man- 
agement, maintenance, and expandability of the system 
30 appear as far more serious problems when the number 
of access control levels is increased, for example, in a 
case in which documents to be supplied to users are 
limited or restricted in accordance with a contract fee of 
each user in a document management system conduct- 
's ing management of charging operation. 

SUMMARY OF THE INVENTION 

In accordance with the present invention, there is 

40 provided a method of solving this problem in which for 
each document registered to the document manage- 
ment system, users allowed to access the document 
are registered as attribute information for each group to 
which the users belong. 

45 In this method, however, when a user conducts a 
retrieval operation in the document management sys- 
tem, it is necessary to refer to the attribute information 
for all documents retrieved as a result of the retrieval 
operation to determine whether or not the user belongs 

so to a group of users allowed to access the document. 
Consequently, there arises a problem of elongation in 
the retrieval time. 

Moreover, in accordance with the present invention, 
there is specifically provided the following configuration! 

ss Thanks to the configuration, there can be implemented 
document management developing a remarkable 
advantage in the cost, operation management, mainte- 
nance, and expandability of the system for a large vol- 
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ume of document information of an electronic library 
system and the like in which the access control opera- 
tion can be conducted in accordance with groups to 
which users belong. 

The present invention provides the following config- 
uration. 

The configuration includes a text registration step of 
registering, at registration of a document, a registration 
document as text data; a data creation and registration 
. step for data retrieval of creating retrieval data for the 
text data registered in the text registration step and reg- 
istering the created data; and an access control table 
creation and registration step of assigning to the docu- 
ment completely registered through the text registration 
step and the data creation and registration step for data 
retrieval bit information corresponding to a user group 
beforehand registered and thereby creating and regis- 
tering an access control table including information indi- 
cating whether or not a user belonging to the group is 
allowed to access the document. 

In addition, there is included an access control table 
created by assigning bit information corresponding to a 
beforehand registered user group to a registered docu- 
ment, the table including information indicating whether 
or not a user belonging to the group is allowed to access 
the document; a document retrieval step of retrieving, in 
a retrieval operation of a document, the document by 
referring to retrieval data beforehand registered; an 
accessible document list creation step of extracting from 
the access table document lists including entries thereof 
associated with a user group to which a retriever of the 
document belongs, conducting a conjunction operation 
between the document lists, thereby creating an acces- 
sible document list including a list of documents which 
can be accessed by the retriever; and an access control 
step of accomplishing a disjunction operation between a 
document retrieval result obtained through the docu- 
ment retrieval step and the accessible documents cre- 
ated through the accessible list creation step and 
thereby conducting document access control process- 
ing for the retriever in association with the document 
retrieval result. 

In this connection, the document retrieval step and 
the accessible document list creation step may be exe- 
cuted in an arbitrary order with respect to time. That is, 
these steps may be concurrently executed. In such a 
case, the steps may be overlapped with each other. Fur- 
thermore, it may also be possible to first execute any 
one thereof. 

Additionally, the document management method 
may include a user management table indicating a cor- 
respondence between each retriever and the user 
group assigned to the retriever and a step of conducting 
a retrieval operation through the user management 
table in response to a specification from a retriever and 
extracting user groups to which the retriever belongs. 

Moreover, there is provided a configuration which 
includes text registration means for registering, at regis- 



tration of a document, a registration document as text 
data; data creating and registering means for data 
retrieval of creating retrieval data for the text data regis- 
tered in the text registration step and registering the cre- 

5 ated data, and access control table creating and 
registering means for assigning to the document com- 
pletely registered through the text registration step and 
the data creation and registration step for data retrieval 
bit information corresponding to a user group before- 

10 hand registered and thereby creating and registering an 
access control table including information indicating 
whether or not a user belonging to the group is allowed 
to access the document. 

Incidentally, the configuration may be implemented 

15 as a document information processing apparatus capa- 
ble of retrieving document information in response to an 
input from a user. The apparatus includes an access 
control table created by assigning bit information corre- 
sponding to a beforehand registered user group to a 

20 registered document, the table including information 
indicating whether or not a user belonging to the group 
is allowed to access the document, document retrieving 
means for retrieving, in a retrieval operation of a docu- 
ment, the document by referring to retrieval data before- 

25 hand registered, accessible document list creating 
means for creating from the access table an accessible 
document list including lists of documents which can be 
accessed by the retriever, wherein documents which 
are obtained as a result of the retrieval by the document 

30 retrieving means and which are associated with the 
accessible document list are allowed to be accessed by 
the retriever. In other words, at least one of the docu- 
ment retrieving means, the accessible document list 
creating means, and the access control table may be 

35 disposed in a device other than the document informa- 
tion processing apparatus. 

Moreover, the configuration includes an access 
control table generated by assigning bit information cor- 
responding to a beforehand registered user group to a 

40 registered document, the table including information 
indicating whether or not a user belonging to the group 
is allowed to access the document, document retrieving 
means for retrieving, in a retrieval operation of a docu- 
ment, the document by referring to retrieval data before- 

45 hand registered, accessible document list creating 
means for extracting from the access control table doc- 
ument lists including entries thereof associated with a 
user group to which a retriever of the document 
belongs, conducting a conjunction operation between 

so the document lists, thereby creating an accessible doc- 
ument list including which is a list of documents which 
can be accessed by the retriever, and access control 
means for accomplishing a disjunction operation 
between a document retrieval result obtained through 

55 the document retrieval step and the accessible docu- 
ments created through the accessible list creation step 
and thereby conducting document access control 
processing for the retriever in association with the docu- 
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ment retrieval result. 

The configuration may further include a user man- 
agement table indicating a correspondence between 
each retriever and the user group assigned to the 
retriever and means for conducting a retrieval operation 5 
through the user management table in response to a 
specification from a retriever and extracting user groups 
to which the retriever belongs. 

BRIEF DESCRIPTION OF THE DRAWINGS w 

The objects and features of the present invention 
will become more apparent from the consideration of 
the following detailed description taken in conjunction 
with the accompanying drawings in which: 15 

Fig. 1 is a diagram showing the configuration of an 

embodiment of the present invention; 

Fig. 2 is a diagram showing an example of the 

group control table in an embodiment of the present 20 
invention; 

Fig. 3 is a diagram showing an example of the user 
management table in an embodiment of the present 
invention; 

Fig. 4 is a program analysis diagram showing an 25 
outline of document registration processing in an 
embodiment of the present invention; 
Fig. 5 is a program analysis diagram showing the 
contents of processing of the text registration pro- 
gram in an embodiment of the present invention; 30 
Fig. 6 is a program analysis diagram showing the 
contents of processing of the data creation and reg- 
istration program for data retrieval in an embodi- 
ment of the present invention; 

Fig. 7 is a program analysis diagram showing the (35 
contents of processing of the access control table 
creation and registration program in an embodi- 
ment of the present invention; 
Fig. 8 is a diagram showing the access control table 
in an embodiment of the present invention; 40 
Fig. 9 is a program analysis diagram showing an 
outline of retrieval processing in an embodiment of 
the present invention; 

Fig. 1 0 is a program analysis diagram showing the 
contents of processing of the document retrieval 45 
program in an embodiment of the present invention; 
Fig. 1 1 is a program analysis diagram showing the 
contents of processing of the accessible document 
list creation program in an embodiment of the 
present invention; and 50 
Fig. 12 is a program analysis diagram showing the 
contents of processing of the access control pro- 
gram in an embodiment of the present invention. 

DESCRIPTION OF THE PREFERRED EMBODI- 55 
MENTS 

Fig. 1 shows an embodiment of the document man- 



agement system of the present invention. 

The system shown in Fig. 1 includes the following 
constituent elements, namely, a display 10 to display 
thereon a retrieval result, a keyboard 20 to input there- 
from commands for registration and retrieval operations, 
a central processing unit (CPU) 30 to execute registra- 
tion processing and retrieval processing, a floppy disk 
driver 40 to read data from a floppy disk, a floppy disk 50 
on which document data to be registered to a database 
is stored, a main memory 60 to temporarily store therein 
programs and data for the registration and retrieval 
operations, and a magnetic disk 70 to store therein var- 
ious data items and programs and a bus 80 to connect 
these units to each other. 

In the main memory 60, there are loaded from the 
magnetic disk 70 a system control program 100, a reg- 
istration control program 110, a retrieval control pro- 
gram 120, a text registration program 130, a data 
creation and registration program for document retrieval 
140, an access control table creation and registration 
program 150, a document retrieval program 160, and an 
access control program 1 70. Moreover, a work area 190 
is reserved in the memory 60. 

Additionally, on the magnetic disk 70, there are 
reserved a text registration area 200, a data registration 
area for data retrieval 21 0, a registration area for various 
programs 230, and a registration area for various tables 
240. Although the embodiment includes a magnetic 
disk, the present invention is not restricted by this 
embodiment. Namely, there may be used any device in 
which the areas above can be provided. 

In this regard, although these registration areas are 
reserved on the magnetic disk 70 in this embodiment, it 
may also possible to reserve these areas in another 
secondary storage such as a magneto-optical disk 
device. 

The configuration of the embodiment has been 
described. 

Next, description will be given of the processing 
flow of this embodiment. In the embodiment, when data- 
bases are created, the system control program 100 
beforehand generates a group control table shown in 
Fig. 2 and a user control table shown in Fig. 3 and 
stores these tables in the table registration area 240. 

In other words, to the group control table, identifica- 
tion numbers of groups for which an access control 
operation is conducted in the document management 
system and an outline of each of the groups are before- 
hand registered. 

Furthermore, stored in the user management table 
is information to identify groups to which each user 
belongs. That is, for each user registered to the system, 
V is registered to a bit corresponding to a group to 
which the user belongs. In this connection, it may also 
be possible that a bit corresponding to a group to which 
the user belongs is set to '0' and a bit corresponding to 
a group to which the user does not belong is set to '1 \ 
Namely, it is only necessary to discriminate groups to 
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which the user belongs from those to which the user 
does not belong. 

That is, the user management table of Fig. 3 indi- 
cates that a user, "Suzuki" belongs to groups 1 and 2, 
and the group control table of Fig. 2 indicates that group s 
1 is a manager group of the document management 
system and group 2 is a group of in-house users in the 
organization of the system. 

Subsequently, description will be given of process- 
ing procedures of document registration and retrieval 10 
operations in the document management system of this 
embodiment. 

First, in response to a registration command input- 
ted from the keyboard 20. the system control program 
100 initiates operation of the registration control pro- 15 
gram 1 10 to start document registration processing. 

Processing of the document retrieval operation will 
be described by referring to PAD shown in Fig. 4. 

First, the program 1 1 0 activates the text registration 
program 130 in step 1000. 20 

The program 1 30 registers text data of the registra- 
tion document to the text registration area 200 on the 
magnetic disk 70. 

The registration control program 110 then invokes 
the data creation and registration program for retrieval 25 
data 140 in step 1010. 

The program 140 produces retrieval data in accord- 
ance with the text data stored in the area 200 and then 
registers the data to the area 210 on the disk 70. 

Finally, the program 110 starts the access control 30 
creation and registration program 150 in step 1020. 

The program 150 registers bit information for docu- 
ments which can be accessed by users belonging to 
respective groups as shown in Fig. 8 to thereby create 
an access control table and then registers the table to 35 
the area 220 on the disk 70 and then terminates opera- 
tion of the program 110. 

An outline of processing of the registration has 
been described. 

Subsequently, description will be given of the con- 40 
tents of processing of the registration program by refer- 
ring to a specific example. 

First, the text registration program 130 reads, in 
step 1 10 as shown in Fig. 5, text data of the registration 
document from the floppy disk 50 installed in the floppy 45 
disk drive 40 and loads the data in the work area 190. 

Thereafter, the program 130 registers in step 1110 
the data loaded in the work area 1 90 to the area 200 on 
the disk 70 to thereby terminate processing of the pro- 
gram 130. SQ 

In this connection, although this embodiment 
includes a floppy disk, there may be used any other 
storage media on which information can be stored. 
Moreover, in this embodiment, the registration docu- 
ment may be inputted not only from the floppy disk 50 55 
but also from another apparatus, for example, by use of 
a communication line (not shown in Fig. 1) in the config- 
uration of the embodiment. 
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Next, the retrieval data creation and registration 
program 140 reads, in step 1200 as shown in Fig. 6, text 
data of the registration document stored in the area 200 
of the disk 70 and loads the data in the work area 190. 

The program 140 then creates in step 121 0 retrieval 
data in the area 190 for the text data read in the area 
190. 

The retrieval data in this case is retrieval data for 
any one of various retrieval methods. For example, the 
data may be an index file to which words extracted from 
text data for index retrieval are registered or a learning 
file for a neuro-retrieval. Moreover, the data may con- 
form to an n-gram method in which an index is created 
for partial character strings (n-gram) extracted from a 
text. 

When the retrieval data is completely created, the 
program 140 registers in step 1220 the retrieval data 
created in the work area 190 to the area 210 of the disk 
70 to thereby terminate processing of the program 140. 

Finally, the access control table creation and regis- 
tration program 150 reads in step 1300 as shown in Fig. 
7 the group control table shown in Fig. 2 and loads the 
table in the area 1 90. 

Furthermore, the program 150 loads in step 1310 
the access control table shown in Fig. 8 in the area 190. 

The program 150 then executes in step 1320 
processing of step 1330 for all registration documents. 
That is, in step 1330, the program 150 refers to each 
entry of the group control table for each registration doc- 
ument and displays an outline of groups in step 1340. 

The program 150 then determines in step 1350 
whether or not the access is allowed for the pertinent 
group. 

When the access is to be allowed, the program 150 
sets in step 1360 T to the pertinent bit in the access 
control table, namely, there is recorded information that 
users belonging to the group are allowed to access the 
pertinent document. In other words, when the access 
right information is set to group 1 in association with a 
document with document number 7, '1 f is set to an entry 
of group 1 corresponding to document number 7; 
whereas, '0' is kept unchanged in entries of other 
groups. Incidentally, it may also be possible that '0' is set 
to the pertinent bit and T is set to the other bits. Only 
the pertinent bit is required to be discriminated from the 
other bits. 

When the processing above is completely finished 
for all registration documents, the program 150 deletes 
in step 1370 the group control table from the work area 
190. 

Finally, the program 150 registers in step 1380 the 
access control table generated in the area 190 to the 
area 220 on the disk 70 to thereby terminates the regis- 
tration processing 

In this regard, it may also be possible to beforehand 
assign information identifying a group to a document to 
be registered such that in accordance with information 
assigned to a registration document to identify a group, 
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the program 150 executes the access control determi- 
nation processing. 

The contents of processing in the document regis- 
tration have been described. 

Next, processing of the retrieval will be described. 

When a retrieval command is inputted by a user via 
a network to the document management system in 
accordance with the present invention, the system con- 
trol program 100 initiates the retrieval control program 
1 20 to start document retrieval processing. 

Processing of document retrieval will be described 
by referring to PAD shown in Fig. 9. 

First, the program 120 invokes the document 
retrieval program 160 in step 2000. 

The program 160 refers to retrieval data under a 
retrieval condition specified by the user, obtains as a 
result of retrieval a list of documents associated with the 
retrieval condition, and stores the list in the work area 
190. 

Next, the program 120 initiates the accessible doc- 
ument list creation program 170 in step 2010 to attain 
an accessible document list, i.e., a list of documents 
which can be accessed by the user, and then stores the 
list in the area 190. 

Finally, the program 120 starts the access control 
program 180 in step 2020. The program 180 accom- 
plishes a disjunction operation between the list of 
retrieved documents created and stored in the area 190 
by the document retrieval program and the accessible 
document list created and stored in the work area 190 
by the program 170 to generate a list of retrieved docu- 
ments after the access control determination, and 
returns the list to the user to thereby terminate the pro- 
gram 120. 

An outline of processing of the retrieval has been 
described. 

Next, the contents of processing of the retrieval pro- 
gram will be described by referring to a concrete exam- 
ple in a case in which a retrieval operation is conducted 
by a user with user name "Suzuki". 

First, the document retrieval program 160 analyzes 
a retrieval condition specified by the user in step 2100 
as shown in Fig. 10 and refers to retrieval data in 
accordance with the retrieval condition to conduct docu- 
ment retrieval processing. The retrieval processing can 
be carried out in any kinds of retrieval methods such as 
an index retrieval, neuro-retrieval, and an n-gram 
retrieval methods. In addition, two or more kinds of 
retrieval methods may be employed in the document 
retrieval processing. 

Thereafter, the program 160 stores in step 21 10 the 
list of documents obtained as a result of retrieval in the 
work area 190 and then terminates processing of the 
program 160. 

Next, as shown in Fig. 1 1 , the program 1 70 reads in 
step 2200 a user control table shown in Fig. 3 and 
stored in the area 240 on the disk 70 and loads the table 
in area 190 of the memory 60. 



Thereafter, the program 170 accomplishes collation 
for a retriever name in a field of the user name of the 
user control table in the area 190 to extract a group 
number of a pertinent entry so as to obtain a group 

5 number associated with an access right of the retriever. 

Namely, in the case of this example, "Suzuki" is 
obtained through the collation from the entry of the user 
name in the user control table to attain groups 1 and 2 
as the pertinent group numbers. 

10 Additionally, the program 1 70 refers in step 2220 to 

an entry in the access control table associated with the 
group number extracted in step 2210 to thereby obtain a 
list of documents which can be accessed by use of an 
access right of each group number. That is. in this 

15 example, the list of accessible documents is obtained by 
referring to entries of group numbers 1 and 2 in the 
access control table. 

Moreover, the program 1 70 executes in step 2230 a 
conjunction operation between the lists of documents 

20 extracted in step 2220. Namely, in the case of "Suzuki", 
the operation is conducted between a document list cor- 
responding to group 1 and a document list associated 
with group 2 to thereby create an accessible document 
list which is a list of documents which can be accessed 

25 by the retriever. 

Thereafter, the program 1 70 stores in step 2240 the 
accessible document list to the area 190. Thereafter, 
the program deletes in step 2250 the user control table 
from the area 190 and then terminates the accessible 

30 document list creation program. 

Finally, as shown in Fig. 12, the access control pro- 
gram 180 conducts a disjunction operation between the 
document list created in the area 190 in step 2300 as a 
result of retrieval by the document retrieval program 160 

35 and the accessible document list created by the list cre- 
ation program 170 to obtain a retrieval result of the 
access control processing. 

The program 180 then returns in step 2310 the 
retrieval result of the processing to the retrieval control 

40 program 130. 

Finally, the program 180 deletes in step 2320 the 
retrieval result document list and the accessible docu- 
ment list from the area 190 to thereby terminate the 
access control processing. 

45 On receiving the retrieval result created through the 
access control processing, the retrieval control program 
120 returns the retrieval result via the system control 
program 100 to the retriever and then terminates the 
retrieval processing. Description has been given of the 

so contents of processing of document retrieval in the 
present embodiment. 

Although the access control table is established for 
each group in this embodiment, the table may be set for 
each user identifier information. This makes it possible 

55 to conduct the access control operation at a personal 
level. 

Additionally, in accordance with the present inven- 
tion, the unit of access control operation is also applied 
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not only to the referring operation to a document but 
also to an editing operation of a document. In this 
regard, the editing operation includes deletion, writing, 
addition, etc. of texts. 

As above, in accordance with the present embodi- 
ment, for each group to which users registered to the 
document management system belong, accessible doc- 
uments are registered as an access control table at doc- 
ument registration. 

Under this condition, when a retriever desires to 
retrieve a document, information of accessible docu- 
ments of a group to which the retriever belongs is 
extracted to accomplish the access control processing. 
Therefore, the access control operation can be 
achieved at a plurality of levels without dividing the data- 
base in accordance with the access control levels. In 
consequence, it is possible to provide a low-cost docu- 
ment management system having advantages in the 
operation management and maintenance thereof. 

Additionally, a new access control level (corre- 
sponding to a group number in the embodiment) can be 
achieved by registering a new entry to the access con- 
trol table. Consequently, there is provided a document 
management system having improved expandability 
when compared with the conventional method in which 
a new database is to be additionally registered in the 
document management system. 

Incidentally, in the access control method in accord- 
ance with the present embodiment, the access control 
operation can be completed in the access right determi- 
nation only by referring to entries (one megabit (Mbit) = 
125 kilobytes (kB) for one million document information 
items) of the access control table.. In consequence, the 
retrieval response is rarely deteriorated for a large-sized 
document database. 

In accordance with the present invention, accessi- 
ble documents of each group to which users registered 
to the document management system belong are regis- 
tered as an access control table at document registra- 
tion and hence the access control operation can be 
achieved at a plurality of levels without dividing the data- 
base in accordance with the access control levels 
Moreover, there is provided a low-cost document man- 
agement system having advantages in the system oper- 
ation management and maintenance. 

Additionally, since a new access control level can 
be established by registering a new entry to the access 
control table, there can be provided a document man- 
agement system having wider expandability when com- 
pared with the conventional method in which a new 
database is registered in the registration of a new entry. 

While the present invention has been described 
with reference to the particular illustrative embodiments 
it is not to be restricted by those embodiments but only 
by the appended claims. It is to be appreciated that 
those skilled in the art can change or modify the embod- 
iments without departing from the scope and spirit of the 
present invention. 
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An information registration method of registering 
information to an information system, comprising: 

a first step of registering information (1000, 
1100, 1110); and 

a second step of registering attribute informa- 
tion for each information registered and for 
each group to which users belong, the informa- 
tion indicating users capable of accessing the 
information (1010, 1020). 

An information registration method in accordance 
with Claim 1 , wherein 

the second step includes generating an access 
control table to which information indicating 
whether or not the user is allowed to access the 
information is registered (1020, Fig. 7). 

An information registration method in accordance 
with Claim 2, wherein . 

the second step includes assigning bit informa- 
tion corresponding to a group of the user to the 
information registered, thereby generating the 
access control table (1020, Fig. 7). 

An information registration method in accordance 
with Claim 3, wherein 

the bit information is n r when the user is 
allowed to access the information and is "0" 
when the user is not allowed to access the 
information (Fig. 8). 

An information registration method in accordance 
with Claim 1 , wherein 

the first step registers the information and cre- 
ates retrieval data for the registered information 
(1010); and 

the second step registers, for each group of 
users, attribute information indicating users 
allowed to access the information for which the 
retrieval data is created (1020). 

An information registration method in accordance 
with Claim 1, wherein 

the information is document information; 
the first step registers the document informa- 
tion as text data and creates retrieval data for 
the registered text data (1010); and 
the second step registers information to the 
text data for which the retrieval data is created, 
the information indicating whether or not the 



BNSDOCtD: <EP 08B0763A1 I 



13 



EP 0 860 763 A1 



14 



text data is allowed to be accessed by a group 
including at least one user (1020). 

7. An information registration method in accordance 
with Claim 6, wherein 5 

the second step includes creating an access 
control table to which information indicating 
whether or not the data is allowed to be 
accessed is registered (1020). 10 

8. An information registration method in accordance 
with Claim 7, wherein 

the second step includes assigning bit informa- is 
tion corresponding to a group to which the user 
belongs, thereby creating the access control 
table (1020, Fig. 7). 

9. An information registration method in accordance 20 
with Claim 6, including a step of allowing a user to 
access the text data, the user belonging to a user 
group allowed to access the text data (Fig. 7). 

10. An information registration method in accordance 25 
with Claim 6, further including a step of allowing a 
user to edit the text data, the user belonging to a 
user group allowed to access the text data. 

11- A document information processing apparatus so 
capable of retrieving document information in 
response to an input from a user (Fig. 1), compris- 
ing: 



the accessible document Jist creating means 
extracts document lists including entries asso- 
ciated with a user group to which the retriever 
belongs and conducts a conjunction operation 
between the document lists. 

13. A document information processing apparatus in 
accordance with Claim 1 1 , wherein 

a disjunction operation is conducted between 
the result of the retrieval by the document 
retrieving means and the accessible docu- 
ments in the accessible document list, thereby 
allowing the retriever to access documents 
which are retrieved by the document retrieving 
means and which are associated with the 
accessible document list. 

14. A document information processing apparatus in 
accordance with Claim 11, further including access 
control means for conducting document access 
control processing for the retriever with respect to 
the document retrieval result (1 80). 

15. A document information processing apparatus in 
accordance with Claim 1 1 , wherein a user allowed 
to access the text data can refer to the text data. 

16. A document information processing apparatus in 
accordance with Claim 1 1 , wherein a user allowed 
to access the text data can edit the text data. 



an access control table created by assigning bit 
information corresponding to a beforehand reg- 
istered user group to a registered document, 
the table including information indicating 
whether or not a user belonging to the group is 
allowed to access the document (Fig. 2); 
document retrieving means for retrieving, in a 
retrieval operation of a document, the docu- 
ment by referring to retrieval data beforehand 
registered (160); and 

accessible document list creating means for 
creating in accordance with the access control 
table an accessible document list including a 
list of documents allowed to be accessed by 
the retriever (1 70), wherein 
documents which are obtained as a result of 
the retrieval by the document retrieving means 
and which are associated with the accessible 
document list are allowed to be accessed by 
the retriever. 

12. A document information processing apparatus in 
accordance with Claim 1 1 , wherein 
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